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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 1 . (Original): A method for classifying received network data comprising: 

2 scanning incoming network data using lexical token scanning wherein said network data is 

3 treated as a stream of input bytes, said network data being organized into data packets, said 

4 lexical scanning resulting in the identification of a data packet as belonging to one of a plurality 

5 of classes. 

1 2. (Original): The method of claim 1 wherein said scanning includes 

2 identifying an arithmetic operation and performing said arithmetic operation. 

1 3. (Original): The method of claim 1 wherein said scanning includes 

2 identifying a skip operation and in response thereto skipping over one or more subsequent input 

3 bytes. 

1 4. (Original): The method of claim 1 wherein said lexical scanning includes 

2 providing a set of regular expressions, each regular expression having an associated class 

3 identifier. 

1 5. (Original): The method of claim 1 further including providing a 

2 deterministic finite automaton (DFA) comprising plural states, said step of scanning including 

3 recognizing data packets using said DFA including transitioning from one state to another. 

1 6. (Original): The method of claim 5 wherein said data packets are variable 

2 length data packets. 

1 7. (Original): The method of claim 5 wherein said DFA is defined by a set 

2 of regular expressions. 
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1 8. (Original): The method of claim 7 further including generating a grammar 

2 tree data structure representative of said regular expression, producing a non-deterministic finite 

3 automaton (NFA) from said grammar tree data structure, and converting said NFA to produce 

4 saidDFA. 

1 9. (Original): The method of claim 5 wherein some of said states include 

2 one or more associated computer instructions and wherein said computer instructions are 

3 executed in connection with transitioning to a state. 

1 10. (Original): The method of claim 9 wherein some of said states further 

2 include a skip instruction. 

1 11. (Original): In a network data switching device, a method for classifying 

2 data packets comprising steps of: 

3 providing one or more regular expressions, each having an associated class 

4 identifier; 

5 receiving plural data packets, each having a length not necessarily equal to one 

6 another; and 

7 for each data packet, determining a matching one of said regular expressions that 

8 matches said data packet, wherein said each data packet is classified according to the class 

9 identifier associated with said matching regular expression. 

1 12. (Original): The method of claim 1 1 wherein said data packets comprise a 

2 data stream and said determining includes lexically scanning said data stream. 

1 13. (Original): The method of claim 1 1 wherein said regular expressions are 

2 represented by a deterministic finite automaton (DFA). 

1 14. (Original): The method of claim 13 wherein said DFA is in compressed 

2 form. 
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1 15. (Original): The method of claim 1 1 further including compiling said 

2 regular expressions to produce said DFA. 

1 16. (Original): The method of claim 15 wherein said compiling produces a 

2 non-deterministic finite automaton (NFA) as intermediate data structure, said compiling further 

3 includes converting said NFA to produce said DFA. 

1 17. (Original): The method of claim 16 further including reducing said DFA 

2 to a compressed form. 

1 18. (Original): The method of claim 1 1 wherein said data packet comprises 

2 plural bytes, and saici determining includes detecting an operator indicating a number of bytes to 

3 be skipped. 

1 19. (Original): The method of claim 18 wherein said number is specified by 

2 the value of a current input byte. 

1 20. (Original): The method of claim 18 wherein said number is specified in a 

2 register. 

1 21. (Original): The method of claim 1 8 wherein said determining further 

2 includes detecting an operator indicating a value to be saved in a register. 

1 22. (Original): The method of claim 21 wherein said determining further 

2 includes detecting an operator indicating a logical or mathematical operation to be performed on 

3 the contents of said register. 

1 23. (Original): In a data packet receiving and forwarding device, a method for 

2 classifying received data packets comprising a stream of data, said method comprising steps of: 

3 receiving a description of classification rules in a classification language; 

4 compiling said classification language to produce a deterministic finite automaton 

5 (DFA) comprising plural states; 
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6 configuring a programmable hardware packet classifier with said DFA; and 

7 scanning said data stream with said hardware packet classifier to classify said 

8 received data packets. 

1 24. (Original): The method of claim 23 wherein said compiling includes 

2 associating arithmetic and logic instructions with some of said states. 

1 25. (Original): The method of claim 23 wherein said classification language 

2 includes regular expressions. 

1 26. (Original): The method of claim 25 wherein said regular expressions 

2 include arithmetic and logic operations. 

1 27. (Original): The method of claim 26 wherein said regular expressions 

2 further include skip operations. 

1 28. (Original): The method of claim 27 wherein said regular expressions 

2 further include data storage operations. 

1 29. (Original): The method of claim 23 wherein said DFA is in compressed 

2 format. 

1 30. (Original): The method of claim 23 further including: 

2 receiving a second description of classification rules in a classification language; 

3 compiling said second classification language to produce a second DFA; 

4 configuring a programmable hardware packet classifier with said second DFA; 

5 and 

6 applying said data stream to said hardware packet classifier to classify said 

7 received data packets, 

8 wherein said data packets are classified according to said second classification 

9 rules, thereby facilitating changing packetizing policies in said data packet routing device. 
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1 31. (Original): A network data packet classifier comprising: 

2 an input port for receiving network data packets comprising a stream of data; 

3 a memory assemblage configured with data representing a deterministic finite 

4 automaton (DFA), said DFA representing plural regular expressions; and 

5 decompression logic operatively coupled to said memory assemblage and 

6 configured to scan said stream of data with said DFA to find a matching one of said regular 

7 expressions, 

8 said regular expressions having corresponding class identifiers, 

9 wherein each of said network data packets is associated with the class identifier of 
10 said regular expression that matches it. 

1 32. (Original): The classifier of claim 31 wherein some of said regular 

2 expressions include arithmetic instructions and logic instructions, said memory assemblage 

3 further configured to contain said instructions, the classifier further including an arithmetic logic 

4 unit operatively coupled to said decompression logic and configured to execute said instructions. 

1 33. (Original): The classifier of claim 32 further including at least one register 

2 operatively coupled to said arithmetic logic unit, said arithmetic logic unit further configured to 

3 store data into said register in response to a save instruction. 

1 34. (Original): The classifier of claim 32 further including skip logic 

2 operatively coupled to said logic component and configured to skip over an amount of data in 

3 response a skip instruction. 

1 35. (Original): The classifier of claim 3 1 wherein said network data packets 

2 can vary from one packet to another. 

1 36. (Original): The classifier of claim 31 wherein said DFA is in compressed 

2 form. 
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1 37. (Original): The classifier of claim 36 wherein said DFA comprises plural 

2 non-default states and plural default states, and said memory assemblage comprises a base 

3 memory, a next-state memory, and a default-state memory; said base memory configured to 

4 contain address locations of said next-state memory, said next-state memory representing all of 

5 said non-default states, said default-state memory representing all of said default states. 

1 38. (Original): The classifier of claim 37 wherein said memories are random 

2 access memories. 

1 39. (Original): The classifier of claim 37 wherein said memories are read- 

2 only memories. 

1 40. (Original): A network data packet classifier comprising: 

2 an input configured to provide a data packet comprising a stream of data; 

3 a first system of memory configured with data representing a deterministic finite 

4 automaton (DFA), said DFA comprising plural states including an initial state and plural 

5 terminating states; 

6 a system of logic circuits operatively coupled to said first system of memory and 

7 to said input, and configured to lexically scan said data stream with said DFA to produce a 

8 reached terminating state; and 

9 a second system of memory configured with data representing a class index 

10 corresponding to each of said terminating states and configured to output a class index in 

1 1 response to the production of said reached terminating state. 

1 41. (Original): The classifier of claim 40 further including a third system of 

2 memory configured to contain current state information for plural input channels, said system of 

3 logic circuits operatively coupled to said third system of memory to initialize said DFA in 

4 accordance with current state information corresponding to the input channel associated with 

5 said data packet. 



Page 7 of 18 



• # 



Amdt. sent December 23, 2003 

Reply to Office Action of August 27, 2003 

1 42. (Original): The classifier of claim 40 wherein some of said states have 

2 one or more associated instructions, the classifier further including an arithmetic logic unit 

3 operatively coupled to said system of logic circuits and configured to execute said instructions. 

1 43. (Original): The classifier of claim 42 further including at least one register 

2 operatively coupled to said arithmetic logic unit, said arithmetic logic unit further configured to 

3 store data into said register in response to a save instruction. 

1 44. (Original): The classifier of claim 42 further including skip logic 

2 operatively coupled to said logic component and configured to skip over an amount of data in 

3 response a skip instruction. 

1 45. (Original): The classifier of claim 40 wherein said stream of data is a 

2 stream of bytes. 

1 46. (Original): The classifier of claim 40 wherein said data packets vary from 

2 one packet to another. 

1 47. (Original): A network packet classifier comprising: 

2 means for receiving an incoming network packet; 

3 means for classifying said network packet by matching the pattern of its 

4 constituent data against plural regular expressions, each regular expression having a 

5 corresponding class identifier; and 

6 means for outputting a class identifier of the regular expression which matches 

7 said network packet. 

1 48. (Original): The classifier of claim 47 wherein said means for classifying 

2 includes a memory component configured with data to represent a deterministic finite automaton 

3 (DFA). 
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1 49. (Original): The classifier of claim 48 wherein said means for outputting 

2 includes a second memory component configured with said class identifiers. 

1 50. (Original): The classifier of claim 47 wherein said regular expressions 

2 include arithmetic specifiers and said means for classifying includes an arithmetic logic unit 

3 configured to perform operations in accordance with said arithmetic specifiers. 

1 51. (Original): A network packet classifier comprising: 

2 a dual-ported memory component; 

3 first classification logic operatively coupled to a first port of said dual-ported 

4 memory component and having a first input for receiving a data stream; and 

5 second classification logic operatively coupled to a second port of said dual- 

6 ported memory component and having a second input for receiving a data stream, 

7 said memory component configured to contain a deterministic finite automaton 

8 (DFA) comprising plural states, 

9 said DFA representing plural regular expressions for matching data packets, 

10 said first and second classification logic each configured to scan its associated 

1 1 data stream using said DFA to identify data packets contained therein and to classify identified 

12 data packets. 

1 52. (Original): The classifier of claim 5 1 wherein said data packets are 

2 characterized in being variable in length. 

1 53. (Original): The classifier of claim 5 1 wherein said regular expressions 

2 include arithmetic and logic operators. 

1 54. (Original): The classifier of claim 5 1 wherein said regular expressions 
2 include a skip operator. 
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